New EvilTokens Attack Exposes Browser Visibility Gap in Enterprise SOCs
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings. A new EvilTokens attack shows how…
Latest Cybersecurity News — Page 266
View all →
Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817)
Exploitation attempts targeting a critical vulnerability (CVE-2026-46817) in Oracle Payments, the payment-processing module within Oracle’s E-Business Suite (EBS), have been spotted over the weekend, threat…
Update time: Apple releases security patches for iOS, MacOS Tahoe, Safari
Apple has released security updates for more than two dozen security vulnerabilities across iPhone, iPad, and Mac. The updates for iOS/iPadOS, MacOS Tahoe, and Safari…
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has…
Post Office delays signing Horizon replacement for third time
The Post Office has delayed the formal signing of a contract to replace Fujitsu’s controversial Horizon software for a third time since agreeing to the…
Vic TAFEs set for “common” student management platform
Victoria TAFE Network is poised for a major digital transformation, potentially migrating all of its 11 institutes onto a single student management system. The education…
BlueHammer Vulnerability Exploited in Ransomware Attacks
A Microsoft Defender vulnerability tracked as BlueHammer and CVE-2026-33825 is being exploited in ransomware attacks, according to the cybersecurity agency CISA. BlueHammer is one of…
Hackers Steal Data of 4.38 Million Aflac Japan Customers
Hackers Steal Data of 4.38 Million Aflac Japan Customers Pierluigi Paganini June 30, 2026 Hackers stole data from 4.38 million Aflac Japan customers after accessing…
Critical flaw in SimpleHelp exploited in attacks targeting sensitive credentials
Researchers found two previously undisclosed malware samples used to steal AI assistant tokens and other valuable secrets. Source link
DHS to unveil replacement council for critical infrastructure cybersecurity
The Department of Homeland Security is bringing back a key cybersecurity information sharing effort with critical infrastructure, more than a year after the Trump administration…
Malicious Chromium extension spoofs Perplexity AI to hijack browser searches
Microsoft similarly recommended that organizations verify extension publishers, carefully review requested permissions, and monitor enterprise browsers for unauthorized or unapproved extensions. Mukhopadhyay said CISOs should…
WIN 2026: Building the AI Security Ecosystem
We launched the Wiz Integration Network two and a half years ago with a simple but ambitious goal: to collaborate with the industry to better…